201303281824 1b6152

explained decrypted filler

seed 707

Metadata

Post ID: 1b6152
Title: 201303281824 → 2013-03-28 18:24 on A858's clock
Posted (UTC): 2013-03-28 08:25:00
Timezone: UTC+10 · title 18:24 against posted 08:25 UTC
Author: [deleted]
Account: A858DE45F56D9BC9 main account
Subreddit: r/A858DE45F56D9BC9 the main subreddit
Category: F3 filler: 3DES(name/title) → GUID list, seed known
Size: 3,088 hex characters · 1,544 bytes
Cipher: 3DES-EDE2 (two-key Triple DES), ECB, PKCS7
Key: MD5(A858DE45F56D9BC9201303281824) = 267c029d2406cdecef82e6381dd4daa9 (name+title)
GUIDs: 48
Filler GUID seed: new Random(707).Next(9) ✓ verified
Run: Run 43 (seed 120,022,078) (seed)
Draw: 35 · predicted N = 48 ✓
Machine boot: 2013-03-21 09:44–10:39 (seed = uptime at app start)
Sources: community-archive, arctic-shift · body from community-archive
Links: Reddit · Arctic Shift · JSON
Score · comments: 1 · 0
Tags: automated (decryptable)2013Encrypted masked GUID listkey: name+titlerun: seed

From the post to its content

As posted (encrypted)

635A80DBA24B5784 E266FC2F556A8A69 F6F94F05F28DBCAE 20CA9C3693522E20 F45B256EA27847FF 02D50C82610A1DF8 B04FE06215B5982C ECFE5C6AF7E4B850 E4F0BA2B179DCD7F E71F9758C3C75C3D 23ACD92C1D48C6FA 60E8855DD7291B65 D11554E4FD0D6B7D 5551AAA7B9DDE4DF A25BFED967546970 37AFCBD85F814910 00A61666ED4DE0E1 AC391DCDBE23217F 28C75C2B022F75CD 7D71548410470566 A3A4954492720B1D 59856E1A390AF5B9 A3F8F7082377EC06 6ECDE8AB92088A3E 6361AAF5D54C358D BBD79C81C64D3F89 6629780D15D40213 EE89A4FB218CCBA5 1C906F4D1FFD9CE9 AE7B2067ABBE4BBD FDD008E533C90D6C 87D9C2020F58F5AC 365F6137366E2123 76148795AEECAA0C C6DD0C7EE4FEBCB9 8F7902B878CE6761 98C55397C5A682E7 08ED5C8C5691BD0A BD045F64F36E422A 748EADC6D7706EB2 4EF7E5D79311E43E ED0871586CEA6CE9 4890BA2BF5C17706 DEC6C2E54BAC8E92 4A989F5370D49440 6BAA8C351793CC74 900CD499833837A1 E9AF5B6E39FBBC1A 0C71AC426A7FEF16 48BD17D7CBDB08E3 8C8DB2B37963A9F8 48A236412D72EB67 1C3F08C2B0ED8F9E 90B1F8B3913159B7 03EC4E4573DA9A4E C113839A86259DEB A313C1283F5B713C 614A9579A7DF99DE 5DBFE44C7A89D6E8 55BCE4E74614763F 141A68AE23B97066 B6DB9B83C0479A64 95589C0DF4462302 704623A900DFBF27 C0E482CD0DEB3174 C1FC01A139AF85D1 B34EF9D1B4DD3BA3 211048EC564FA6C1 F92A0048EF4A8BC1 63A5205762F1328E EEC8A5EC45D87FD5 17F481AB52FE577C 08DE1522DBD40A2B 046585F3F37858D0 9383DAD00CD57373 65545E384F65C35B C458E51AB8C9B423 258F707AB3DA9BDB F4B7D8261B761CEF C99F74CDF1A264FD E8A5AF330E40B539 B889D4B35AD73D6B 930B4A0B06B6D5F8 5D2027CD9FCA3691 7C6EF50DC87A6C7E 306D077F8CB88C32 C78424E66E23172C 0CEAF4238A1B31E5 7EB7BBEA69F81C7C 4F1693F29F4E7271 BAA18536AF285479 EA30F77CBF613927 77B43E417FB5AEC6 40B1A36AD84AECEC 99D7882FDB3C8737 837917CF9E018F11 C89EAE01D41F2637 753B4E9B11823565 6FB1058DB250DBED 8F06FD68F0D50198 0DA25865DA7841C1 20CF496E00B27A18 7ED0F696CDB4ED18 89008F522557C8EA 561A794E4E4FB83B C6056CF017A0EBFE A31E27176C9F5E53 E6FDE031C5A91B80 22C05A6C48A52972 87106E821838AD93 F305BFC800868BE1 3DA8768B2E4A518A F416F3128D0324F4 264D1745342EDC59 9B83C6492C20C2DB ED6A9DCC277BD53D 2891D8FB66AA9924 A6285A18FA125CC8 367D7A97DDE13E07 9DD20AFA94CE9DD5 40CFC93A0848D179 9C54652E42338E67 5D591151C474DF15 5A42C970431BAEC8 3EDF942EA754302D 566279BB3589C8E1 FAA8F51AE8FFF818 6ACF597FEE99EC2D 98CE917E9427CFD2 C37CFFE11747EB5E A19586A3F3576C12 4CA0E1B93CF24310 CC3BE9CE2CB946D5 4A7389BA3806906A 28E4384E844AC2A9 31CF5D0EB8A3F778 282B3FDE0B31CA3D 81CF9FCD9CD33FA2 5BC67229E7ED89AE 76A7D89BF0C187BC 0D415630EE9A9B10 5B0753BA791CFDDC 8C4247EA76876FFA 4AD16005F73AD2BD 499BD1F55252BF54 0565AAA281A2082C 91568C479ADADBA2 332E4BC1EEB563C0 8C41063FE8AD8162 9452622B19AE36FB 9909AF4B4D2409BB 7B6F120CDFD623AE 6ABE664F98D0530F E1572AA3AAEDAEE9 95703BBA8EDB7F4A C53CDC3CBD9FEE02 E5962DB6F7424508 2E921C91D9EE4A55 163FA707EFF843A6 2B1B4D6EEC6F5FF9 2050F95E2BA773DC 598154C8009D6865 A09C5534B99153B0 D1486848DCE9D220 C938E44CEBE1DA0D C252291CBAF24574 A6ADD77B112537D9 D800FF679E69E191 53328F09590B75C4 C2B7B0D2B15610C1 F492DB15C76591A6 0C582DE7976F9794 D921FF27775687DA 86ADFC93420B8908 709B145032D82DA6 DC5EA1CC2501F3DC 47F2F8990097F9C2 624FB47236A0F6DB 266AA924DA45208A ABF8BF588F47319C 8573BC71544E2771 420DB4ACA66AE58D 82FB6A3446307FA5 2361A8EB1D0F3957 52D7A514841842A0 D28957644E6F65F4 59B5A1631FC7D35B A8FA8A16D77703CE FB7A199AA96288AF BB2053471C23825A 607F1E4F1C4F6F93 19ADF40DEA55D616 4021C2DEDD6EA3B6

Read the ciphertext. Strip whitespace: 3,088 hex characters = 1,544 bytes = 193 8-byte 3DES blocks.
Derive the key. Password = A858DE45F56D9BC9201303281824 (name+title). Key = MD5(password) = 267c029d2406cdecef82e6381dd4daa9, used as a two-key 3DES key.
Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 48 GUIDs as hex (shown below).

Decrypted: GUID list

  1 3a304caa-efb4-00ed-8b83-500f520d5cb9
  2 92225787-4204-2ab1-8c17-78e177941c05
  3 a06fd093-bb0e-8034-9a2f-a5d82b55fb6e
  4 2a932a69-b5b7-4cf2-86b0-5dcbb1755080
  5 f083110e-8b72-3096-9007-950d71209ae6
  6 bc51a2e7-406c-368e-b475-9ce9a0298951
  7 5d1b3f51-db4b-6bae-8ce2-da227c05beb2
  8 aedf3486-19d0-11ba-9660-1d578dc7d79b
  9 a7ad71b0-0716-4823-922e-2d4645ae4d22
 10 a9b3341e-c33e-8dc3-b09e-6d3cc24e7ba4
 11 180b312a-bbf7-1f08-941d-eaefa41857ac
 12 d653cdf8-2c5c-3727-876e-c361036d81f4
 13 c5b597ef-7d35-5831-81f2-a48dcefe7900
 14 5ce76fac-412f-23a2-a59a-a3b52ee49a17
 15 29038031-f9c1-7323-a2be-cf3aeac73504
 16 6be2ac63-7e8c-5fb0-8f28-cf187fd8e711
 17 ec09ccd9-9056-0b20-bb7c-e41ff07cdc5a
 18 f29ceed7-4e05-373f-9c9a-043e6dc04490
 19 d6c8e062-d62b-7d20-aba6-ad1a433cbadc
 20 356d359e-d8c6-0bf3-92c0-992bd4b25609
 21 ccc089a9-76bc-685e-a581-32ad80123b91
 22 716699c0-16f0-24c2-a26e-d8588046acf7
 23 429cdad0-d4bc-4eb5-bab4-67063a894afd
 24 72af5e03-7e47-0791-9ad9-82624e7cc057
 25 079dc74f-371e-8296-aa29-f1932f597ae9
 26 0f60bece-c225-2da6-918a-88fc41f8c37a
 27 6652d571-0c3c-703f-b3f1-24656f6fef97
 28 d6378685-45f1-6430-9d00-6be3135a4549
 29 50c4c656-8408-7ed9-bb08-051ff5432ae1
 30 84ce7cf1-f8a5-4256-bb89-aa3f78c0d22e
 31 a2413586-2587-186a-befd-0bbc2110b25a
 32 46e96b15-fe39-61dc-8301-d698f578be57
 33 1b5a4bea-920f-5e46-a489-3b700828b10f
 34 e3e89b96-7cc9-64e7-9b09-dcb81ee259d8
 35 cdad8220-f5d5-43b3-af5e-22533e7fc25b
 36 58141b68-a43b-3cba-92a4-13815283b05b
 37 6d07c2eb-1d5c-6332-aef9-5f017c678eae
 38 032e6f7b-9f58-1462-89de-384c0acb0609
 39 54e340e9-5a18-3e63-8ffc-cbcfbf61aec7
 40 681e886c-2d08-3269-9e8c-ae27a7f3b183
 41 ecf71fd7-e354-2fd6-995b-2a74af7b38e0
 42 ba4f6208-f859-1dd9-8932-ffbf3ca4d02b
 43 6b05c722-11fb-5107-abb7-0dde133d6a17
 44 a44765af-c2e7-2dd8-987f-f30896c7746b
 45 6ffa4e84-34a8-5306-ba6f-7ed18626cb2b
 46 c32d7108-c5c9-326b-87c4-c1f8c14357dd
 47 910ad193-61e0-7b56-bb0b-2a5060f914cf
 48 c10aa186-ae2d-44aa-942c-fbd677e8633f

Explanation

Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives 028433614813527503706240827674165643613321525374. Exactly this sequence comes out of new Random(707).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID are Guid.NewGuid() output and carry no message.
Explain the count. This post is draw 35 of Run 43 (seed 120,022,078): new Random(120022078), 4·Next(8,16) per post. The RNG predicts N = 48; the post has N = 48 ✓. The seed is the machine's uptime in ms when the app started (boot 2013-03-21 09:44–10:39).
Conclusion. Filler. The content is fully explained by the two RNGs.

Metadata

From the post to its content

As posted (encrypted)

Decrypted: GUID list

Explanation

Related